{"report_id":"569a09c8-e81e-4319-be5f-4f84e55257f3","version":6,"status":"done","tags":[],"date":"2025-12-30T19:03:33Z","url":{"schema":"http","addr":"gjpxjd.com/","fqdn":"gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":0,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.gjpxjd.com/","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"title":"im冷钱包app官网入口-im冷钱包下载-tokenim官方网站入口-im官方版钱包下载|Tokenim钱包","dom":{"size":77486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2365)","md5":"3e2fb0b250c7367416446106c9b75b9c","sha1":"2017988415ef0183f27e1412950ca0031f70290d","sha256":"5ad83aba2d964e7e5834af81beb2dbc91463656c34ec5168a35098258d04818f","sha512":"776d34dd63bebe8f3c1916ff6ff047ece7dd0eb9ec6fb552dafe71828ccea4c399264a22a4fddeb696182949d8f58627ada350afcf100cc12400ddcd839e01b9","ssdeep":"768:8foT/ptXN9vi71iIzlWxTfHM6WAfUl+X49nFNif:IoTBkh0xAXwYnFNif","tlshash":"9b73869520f12d6f0466c694b9b25f0fae96e40fda5e216439ac56c91fe7f328c03f84","dom_hash":"domhashf031dfcf470b2695720db61dee640968","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gjpxjd.com/","fqdn":"gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":0,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-03T19:03:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gjpxjd.com","ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2025-05-03","domain_rank":0,"first_seen":"2025-12-30T19:03:33.861051Z","last_seen":"2025-12-30T19:03:33.861051Z","alert_count":16,"request_count":16,"received_data":638547,"sent_data":8522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"gjpxjd.com","ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2025-05-03","domain_rank":0,"first_seen":"2025-12-30T19:03:33.866691Z","last_seen":"2025-12-30T19:03:33.866691Z","alert_count":1,"request_count":1,"received_data":79001,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":6,"received_data":64889,"sent_data":3252,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":12932,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oudngmslhifnsf.gdmgcyy.com","ip":{"addr":"206.119.188.34","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"domain_registered":"2020-05-10","domain_rank":0,"first_seen":"2024-02-01T09:47:13Z","last_seen":"2025-12-30T12:02:54.31966Z","alert_count":0,"request_count":1,"received_data":1829,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.3","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gjpxjd.com/tj.js","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3323ce79337606da425e1cb68461c38a","sha1":"9635339a1bb8e31e3ce395245fc67ab0c822d7f2","sha256":"9b81ca6fef1a7cf41d4bd4e7b14d4df1b326905f588bf974a9cc4a6484c8952f","sha512":"6ae4d07436fee4bcbd594abc57827d76c65cf5661fa55bbef183b8b0b73c6b7fcd7748a8757ea0c3008c93c49b6f4cd8adce53171fd85c550d12f3aaae367090","ssdeep":"","tlshash":"8de0c0e4359274ca430ab8d1043bd00ae2f65649bcaf51f4f908710d795578c529f699","size":363,"data":"","first_seen":"2024-12-02T16:35:21.418842Z","last_seen":"2026-04-04T04:33:27.552726Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":80,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5bcd1fd86f5e6e028374e108ac2a5295","sha1":"1e75df98e8f073235317b79c870f123d0d032e1a","sha256":"8e89eccac1adef45f1ce55fca42ada006257ce5ae0e1df817510a5eeb70047d3","sha512":"2ea857ab4a5271bb02d0ff6131cb4721c02380209dbd8ed810df4c96f5d251f2e74d16a9b6e8594cfcf1153e7285437874494735dc171dc6a5109088dd3250c0","ssdeep":"","tlshash":"33b012426e1991406a0558840531e5cc30748829ad90e512004940000061ad80c42d40","size":88,"data":"","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-04T04:33:27.628406Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oudngmslhifnsf.gdmgcyy.com/tja.js","fqdn":"oudngmslhifnsf.gdmgcyy.com","domain":"gdmgcyy.com","tld":"com"},"ip":{"addr":"206.119.188.34","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc934e6f6bbe8158806c8f1d375bbe7","sha1":"2cf2fd7ed5a9405af0e4366bc19b02dc527ccc76","sha256":"f5598ac6b2a832b0b35a705fa2fea04ac6080c9a33ef15bca2ef07e10f186906","sha512":"bdbfc25129e0b69ccd72c7615bea28242bf0fd245d9a29814e5f3e354e803ce820d42f56e6caee39a5560eeab9283c4fb20bf648401fe9c510e9f780ffa61861","ssdeep":"","tlshash":"a1316278374b04a23367f612140b100d63b8d3854b6f08a0e3a475967df6948d49bfbe","size":1538,"data":"","first_seen":"2025-11-29T03:27:59.737284Z","last_seen":"2026-04-04T04:33:27.569763Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":80,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a2c100e1f770b423370aa8ea8f49ac29","sha1":"8ba047b696b41d66c3b0c59331ec6cb2c7730a99","sha256":"b4e14d00e31aa995facc93ba9d57fa1930d0e0ba1c76c1442be059fc19600fee","sha512":"9bff3bda3aadc7bbb3e68666ed84e27f17a306d3860951184074ec4251482e6e99cafe239dcde054f502bcf6658ae095ea8a6f9711ca40fe44a8b32c9b590a3f","ssdeep":"","tlshash":"633110f17086902e8163566138696f9c793ca140eb168c7254dcb9b4e486eca6823f8c","size":1494,"data":"","first_seen":"2025-11-29T03:27:59.794919Z","last_seen":"2026-04-04T04:33:27.629089Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a19c6ace26811efdef48d7c7c0dbd6ee","sha1":"08fa6e7e9b2efe1acccce1e152364ab760aca633","sha256":"5c0e2b883d3607913acf5c34b2c77df71aa2005dc20e19ab2b9cdd9977b27c4f","sha512":"84be61df9e480c1bff2cbec0ace4cf2bfada014a9af03d83cf13514abbc72fd5282612eff7fbbd920a101da6d6b31568977e9ca101284c9c99e01ba7dc62ab9f","ssdeep":"","tlshash":"6ea0025bed1ad5949a00ecc84536f58c6021994e6de4e96749ac41045a62aed0852980","size":65,"data":"","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-04T04:33:27.629929Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/owl.theme.default.min.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/owl.theme.default.min.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 936\r\nlast-modified: Fri, 10 Nov 2023 07:49:54 GMT\r\netag: \"654de0a2-3a8\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"275048a23c69c24c6bd3316d9a45882e","sha1":"31f27f631d97f8564386f05fa2859683349d5fbc","sha256":"296b3d8e9fa36733999a69d6e630bc6361ea23dada8c98a0e48d34ba7f7d0ed2","sha512":"190cfa9c0a64753edc58dd429e3fc33809327f334ea2afadc4885210ad46e074c26d21d51a9b2bbe2ae9b5b00feb436eeea6f0d3e5e50003c65262d4d8be65e2","ssdeep":"","tlshash":"fd1157c4a18a221d3023c190579842cb6b1e687f425d0af6f89e9160c22dd052a6fbe9","first_seen":"2023-04-05T13:57:46Z","last_seen":"2026-04-04T05:06:44.620476Z","times_seen":4643,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":945,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/img/logo-light.png","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/img/logo-light.png HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 07:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0fc-7ae\"\r\nexpires: Thu, 29 Jan 2026 19:03:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 32, 8-bit colormap, non-interlaced","md5":"915188b86270852d2e5ccee188618311","sha1":"1edc6a9a5532aa16b7252f6dccb976c3c335bc3d","sha256":"7962e34e07951a0e213f3513979ae0de92b9047e6e22210059f38b0d8ccb0e89","sha512":"c387888257a24d5ef4617838294c296c06fcd8476dc386a5ae2581174a38f9fcb48aa66c586665f0939723a162161b469cee43f14ebfed06114abb2739f2988a","ssdeep":"","tlshash":"a3411fd07099a44b83590dffa6857bfb870e823c6c13006d90775da999d6e843b5ed32","first_seen":"2023-11-16T22:42:55Z","last_seen":"2026-03-23T13:14:27.963556Z","times_seen":37,"resource_available":false,"data":null}},"time_used":5203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gjpxjd.com/","fqdn":"gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T19:03:10.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:11 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: http://www.gjpxjd.com/\r\nset-cookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78505,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":482,"dns":169,"connect":152,"send":0,"wait":160,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 20:59:17 GMT\r\nexpires: Thu, 24 Dec 2026 20:59:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 511440\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T05:46:15.227902Z","times_seen":192464,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":196,"dns":2,"connect":8,"send":0,"wait":8,"receive":1,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/animate.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/animate.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0a4-1105f\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"4b2af0a41eef75639dde95c23efd47db","sha1":"26f4b70e8c3892c842d5000d59ab120a8c5fad1c","sha256":"70c941a384137809113d33db0b4d68e31a85f711cdbfb5a2952564ac08fdc6e5","sha512":"c0d9a2d9fd58309b4b4be30ffc8b98a547cd936237bd6c0421ef18b7f77bf040ebf10ce7a8203944979bf0cb9fc73c461cc6074ecdad9ef475a7e9858f7ceede","ssdeep":"192:xIQHnfwf2T/awfDZUiduG+MONjPscYODkcWFFLbimZbHMxymDSVbyPiVEzfukrW5:xIWdWy5","tlshash":"b063096929a1114466370a15c7df9f78263ce1a31866ecfeb3d2588b8f11fac23cd617","first_seen":"2023-04-07T05:48:21Z","last_seen":"2026-04-04T00:19:38.607148Z","times_seen":1159,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Dec 2025 19:03:12 GMT\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"462fe67abc03f51e1782b080257fb35b","sha1":"34ab002df028d39d5d9d1387b7ad235291c6f240","sha256":"812226c2d9320911b94d2168f9a1f205391201c424931b2e1a97f279c235b4b7","sha512":"16bbae0cfd1165c71088b1285b004dc365293926a3581c55c4e7cb3538e244c5b96f4d83d0529125e4c63a09ecb6d3192a25ed36cbd0086930f33d44c1f7c245","ssdeep":"96:1OEbaNjlOEbaNGFZKOEbaNgOEbaNXTOEbaNby+aZjzBrgOEbaNyubqGIFuV4yOEQ:2NjmNGN/NXkNbqbNtbqGIwV4BNbNZwNS","tlshash":"1bc10d91041b04409b834cd227ce7f34fe1f92106145d0b9ebfdab6b9ddbda6426835e","first_seen":"2025-11-19T00:56:02.735302Z","last_seen":"2026-02-19T20:58:44.99154Z","times_seen":7358,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":59,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/tj.js","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /tj.js HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 363\r\nlast-modified: Fri, 16 May 2025 05:44:23 GMT\r\netag: \"6826d0b7-16b\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (362)","md5":"3323ce79337606da425e1cb68461c38a","sha1":"9635339a1bb8e31e3ce395245fc67ab0c822d7f2","sha256":"9b81ca6fef1a7cf41d4bd4e7b14d4df1b326905f588bf974a9cc4a6484c8952f","sha512":"6ae4d07436fee4bcbd594abc57827d76c65cf5661fa55bbef183b8b0b73c6b7fcd7748a8757ea0c3008c93c49b6f4cd8adce53171fd85c550d12f3aaae367090","ssdeep":"","tlshash":"8de0c0e4359274ca430ab8d1043bd00ae2f65649bcaf51f4f908710d795578c529f699","first_seen":"2024-12-02T16:35:21.418842Z","last_seen":"2026-04-04T04:33:27.552726Z","times_seen":98,"resource_available":true,"data":null}},"time_used":3920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3919,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/style.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/style.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 14:57:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654e44bc-13ae8\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80616,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"25c81a6c9b81db0c4b645ef90e141937","sha1":"564e938fc3ee14bd85953f493d7ce7287acfabb8","sha256":"ea8b7bff89ada716398a1a59d1e1924169d4a87c2a8796840a676b7636c66f31","sha512":"276ce6bcdd5577e8d2d2195251293461f25e5ebcfda9dee2f145e797d550364b916f620991c0c6ba71a0daa5b23fbee50d3ca698b34170b7e1fc9641e747525c","ssdeep":"1536:11d/UH8pwIEmAIJQGddf5lEIE1IEvOIfIExIExHsIEvVRvIEPBIE4CpIEvAaA9R1:SH7IEjqEIE1IEvOIfIExIEmIEvVRvIEw","tlshash":"157342f67e691208741be1586e96af86376c8152d10fccb8bed6a42cee853d81173f0d","first_seen":"2024-12-05T13:33:40.038101Z","last_seen":"2026-03-23T13:14:27.940951Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 21:09:29 GMT\r\nexpires: Wed, 23 Dec 2026 21:09:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597228\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-04T05:39:27.584558Z","times_seen":45615,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":92,"dns":6,"connect":7,"send":0,"wait":9,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 27 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 302439\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T05:46:15.271808Z","times_seen":203503,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Dec 2025 19:08:46 GMT\r\nexpires: Sat, 26 Dec 2026 19:08:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 345271\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-04-04T05:38:56.804334Z","times_seen":21308,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/magnific-popup.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/magnific-popup.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de09e-1b27\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-04-04T05:45:33.120811Z","times_seen":21272,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/bootsnav.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/bootsnav.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0a6-f745\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a68f4c65e5588d8ffb11377c0796f94c","sha1":"830a89d2f4eafc28c6e8ba2cc421e83fee9acbc9","sha256":"5469f99e86a9b4a106b2d27b75d0d7487eb61bb57a6c9fbce68ee7b09aca18ad","sha512":"810cd4d8e8097c8f0d4b722e24159e0bebf4f1d2cceb0c9a10996b8d225d285bf2f7a357460c2da7ce9bb9d18509d2b1648128bc916a9991df9d7b847d8310d6","ssdeep":"768:oFzrBtdFd+3FnFrFttcFKHteDFCNTQdFyFkwOnHSg38DtsFokOFSaezN+K:o9pe3p9jtcEk4Qd4Q8iCImK","tlshash":"2753cd96baf37800201e805e55e76754affac0425a8dcd3b39bb27baaf461c14853f4d","first_seen":"2023-11-17T00:29:06Z","last_seen":"2026-03-23T13:14:27.953365Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/responsive.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/responsive.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:50:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0aa-3e88\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"419a73cc72f8494ede3c8625206e9aa0","sha1":"3eed867b81f278f7a375a78b9cee9ecf4eb60eaf","sha256":"f8836c93082a529e94cd999cc0c5f1786b3767ed31e3b04c6c18dcffc7ebfac6","sha512":"8beec22f22e2f0a6f2c8000737b9fa619e3ce36f409011c493671d64d01d35c6ed5484e6a32f74aa2e5a3755ce471a8a45393d86d413e63eeeba2078c82939df","ssdeep":"192:AF7PTeLPWvB8s6QG+fZOYtsBW5wFZTifTIkC08MfB86QK+aXc+45Ja/OyGs/uHF:U7PY86s6d+N8W28RJ66v+fr/","tlshash":"27727919bd032a8975b573b1dfb6595afb821423d74a60e27cc0d242dfb839c416aecc","first_seen":"2023-11-17T00:29:06Z","last_seen":"2026-03-23T13:14:27.977819Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.gjpxjd.com/","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":80,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T19:03:11.545Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 30 Dec 2025 19:03:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://www.gjpxjd.com/\r\nSet-Cookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; Max-Age=86400; httponly; path=/\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78505,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":328,"dns":177,"connect":151,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T19:03:12.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=3br6oi5uldoc43dolulnmjtib2; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78505,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2400), with CRLF, LF line terminators","md5":"1203d1eefe21e551af8ba49677acc376","sha1":"57fb1de01624ce1ef0826f55cb5ee76bfec953ee","sha256":"b5371880fd40e84c9d6876e2fa4fa1e7349e9d109f2104752925ddb9e799ac9f","sha512":"a26f1286818253b0d5c1fc74f38368577f451e510f8b46da8b8bca813d75966445fda634ee3860a872a81436175761f6292f36d6bc2a02dcaf0cd33f9a8efc88","ssdeep":"768:TiHA/pRUxxvgf1iIf36JV9HG6WANNSAX4HnFNiW:uHABdJKJOXEQnFNiW","tlshash":"2373859560f02d7f0466c694f9b25f0bae96e40fda1e216439ac56c91fe7f228c03f84","first_seen":"2025-12-30T19:03:39.135547Z","last_seen":"2025-12-30T19:03:39.135547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/bootstrap.min.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/bootstrap.min.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de098-1d943\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121155,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65416)","md5":"718fc0713c21889795de9e0a4f221896","sha1":"5c3137f1a7bdb60f2b89717c5d807e0cc58c04e7","sha256":"1a837f5b140080118d60e3441b38e19d0c67890d0d84d1f3767bed1b2324f49a","sha512":"c8192dec928c155d1bfe9f21a6375548728c47bd5a8785c46b531b684ae2b45140fc91a73f5d53c1545538cf899387708a6fb18f5b7e3b986c7ac49aa4cbb2e0","ssdeep":"768:uy3Gxw/Vc/JWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Qw/aGfIuiHlq5mN8lDbNmPbh","tlshash":"e6c3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-11-17T00:29:06Z","last_seen":"2026-03-23T13:14:27.94721Z","times_seen":33,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/img/download-img-zh.7181682.png","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/img/download-img-zh.7181682.png HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 14:54:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654e4412-dfba\"\r\nexpires: Thu, 29 Jan 2026 19:03:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 558, 8-bit colormap, non-interlaced","md5":"cebb28c6d94a2f11ffbc8ecbb8ac160e","sha1":"753dbf80e455ed80b40f362cfbf8bef8f12a7b0a","sha256":"37f3bc6fd9c4981d94a76669321854e65f921cd445809d88cd4ef86818e553d0","sha512":"bf2275bde4daa9b5bdb910df65d76d9a0863c66b77ebef8a433d75fdc8637ce9ea12e495135b6a98672f9428542d925d9addb6b72ceaa4320d7e3d99a7aa4574","ssdeep":"1536:xO+HZ2L6wKzDLvdEUsgZzeeWL64LERcnzZX7Cfl0ryFbW:A+HsuwKzDj+9gNiL64ERcn9X7KoyFi","tlshash":"f943f297bcf231184571c412376a8db8b18b0ad47d0ae6c2e9e7a8fd4f702c32d72616","first_seen":"2023-05-06T00:30:19Z","last_seen":"2026-04-02T18:06:31.126295Z","times_seen":289,"resource_available":false,"data":null}},"time_used":8947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8947,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:400,500,600,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Poppins:400,500,600,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Dec 2025 19:03:12 GMT\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2fa50a64fcefa8f8e9779091ea631b69","sha1":"8f69d8db81b216acbea545fac11b897030568e78","sha256":"70c803dec1b75cbe27275bcaf3e5513794d9b268c1523e48c505b9e6fe40c789","sha512":"893579fdda05fb0f4aff2eaf67728ba4e3c74c8840bc6a0b5c18149a804695bef3243c4bac418ef6b043f338f063cede211039be78ef0551ebeb228358c6f59a","ssdeep":"96:SOLnOLCJc+ukOLuN3Og3OgvJc+ukOgON3OxTcOxTUJc+ukOxTrN3OCvOCnJc+ukl:3CKSe1rV3HwwVzzbtwpOn","tlshash":"2bc18bd2087be41467831cc212ce7d36ee0ea244b450e574abfe0c9cada7c69537272d","first_seen":"2025-09-20T10:28:45.010575Z","last_seen":"2026-04-03T20:48:05.351318Z","times_seen":264,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":19,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/flaticon-set.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/flaticon-set.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de09c-b84\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5498558f7c0b9e0a6c27caf09a722636","sha1":"c5602a09d56a45ca33022980f71bef6cba779e94","sha256":"b7dc28c0ee72d535d03365714f6b7302b2ce07ffe658754e28c70eff53712f6a","sha512":"be1f648c260975f32e210feca98490fd90e9fff22de46810b87fb6710d4c501a4bbb579c79a94e13fd7d4c141d1c5e84b328b7f27fd941ae7ea188a418950aca","ssdeep":"","tlshash":"645197b5c13e00814311ee8523af66509f95b02d98e4ac79e1466e9dfff5e1893c23dd","first_seen":"2023-11-17T00:29:06Z","last_seen":"2026-03-23T13:14:27.956929Z","times_seen":31,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/img/logo.png","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/img/logo.png HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Nov 2023 07:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0fc-d83\"\r\nexpires: Thu, 29 Jan 2026 19:03:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 33, 8-bit/color RGBA, non-interlaced","md5":"114335d7cc2a8a999f7218fdce3a24d1","sha1":"0bbed2ca3dc5dc097e74e68ab421e70984a95765","sha256":"4c8183e06b68cc22e6da97be9700f06a8acf3fcd785483d2c0ba06df8abec1c7","sha512":"82ab564552e4033fe3656cc7a6ce18c82f29aaf9b3707897e8c82b524dc5d549780725743490c8bca8de41381c1123bf82db673e08c3b460af1666df166439b3","ssdeep":"","tlshash":"2d618fe5144207dec95c7d104aec174bd5670fce950b31dcf99aa51ce621ca2c635a1d","first_seen":"2023-11-17T00:29:06Z","last_seen":"2026-03-23T13:14:27.970686Z","times_seen":42,"resource_available":false,"data":null}},"time_used":7500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oudngmslhifnsf.gdmgcyy.com/tja.js","fqdn":"oudngmslhifnsf.gdmgcyy.com","domain":"gdmgcyy.com","tld":"com"},"ip":{"addr":"206.119.188.34","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:16.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oudngmslhifnsf.gdmgcyy.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 06:39:18 GMT","end":"Wed, 11 Mar 2026 06:39:17 GMT"},"fingerprint":{"sha1":"84:4B:0B:7A:0A:D0:42:4C:42:71:F9:E1:85:CC:DD:07:F9:BA:C0:D7","sha256":"11:41:A5:14:00:68:D7:F8:23:DF:F1:C7:18:0C:48:6B:48:89:72:3F:4A:54:4B:2E:B2:5B:F9:3A:4E:E5:22:D4"}}},"request":{"raw":"GET /tja.js HTTP/1.1\r\nHost: oudngmslhifnsf.gdmgcyy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.21.4.3\r\nDate: Tue, 30 Dec 2025 19:03:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 25 Nov 2025 02:47:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"692518b3-602\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.3","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1538), with no line terminators","md5":"7fc934e6f6bbe8158806c8f1d375bbe7","sha1":"2cf2fd7ed5a9405af0e4366bc19b02dc527ccc76","sha256":"f5598ac6b2a832b0b35a705fa2fea04ac6080c9a33ef15bca2ef07e10f186906","sha512":"bdbfc25129e0b69ccd72c7615bea28242bf0fd245d9a29814e5f3e354e803ce820d42f56e6caee39a5560eeab9283c4fb20bf648401fe9c510e9f780ffa61861","ssdeep":"","tlshash":"a1316278374b04a23367f612140b100d63b8d3854b6f08a0e3a475967df6948d49bfbe","first_seen":"2025-11-29T03:27:59.737284Z","last_seen":"2026-04-04T04:33:27.569763Z","times_seen":73,"resource_available":true,"data":null}},"time_used":1782,"timings":{"blocked":770,"dns":42,"connect":241,"send":0,"wait":241,"receive":0,"ssl":486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 24 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515219\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-04T05:46:15.236632Z","times_seen":203183,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":92,"dns":5,"connect":9,"send":0,"wait":8,"receive":5,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:17.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.gjpxjd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 24 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 507832\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-04T05:45:55.116873Z","times_seen":295227,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/font-awesome.min.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/font-awesome.min.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de09a-b241\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45633,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45453)","md5":"63f40d7eafb50f21cba75897916a770c","sha1":"4206f610954dd350d05e129ef672efbca9e2147c","sha256":"180e07bfd661132b126f7903f385dea640369ceb5a9ac0005e678792873b28d3","sha512":"1fa6048f864297288ebc9fca3091ec45caad484911e900ed11a6a7810cead4cb03a93b75f22b642dfb2d5c78b50ecddaccd8e0037c2271ad18698c6bd71a1973","ssdeep":"768:j31oUM1Q6VgU2lzkuT/aMdj3hSvWQB8/r:aUMS6VgLz/ms4e3T","tlshash":"a0230cb8e54c41d6a731c04fff82b2b861baf73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-15T12:43:59Z","last_seen":"2026-04-03T22:48:36.901596Z","times_seen":183,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gjpxjd.com/skin/css/owl.carousel.min.css","fqdn":"www.gjpxjd.com","domain":"gjpxjd.com","tld":"com"},"ip":{"addr":"154.90.30.66","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gjpxjd.com/","date":"2025-12-30T19:03:12.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gjpxjd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:50:01 GMT","end":"Sun, 08 Feb 2026 09:50:00 GMT"},"fingerprint":{"sha1":"EB:6C:AB:C4:67:6C:8A:F5:AA:68:FC:CA:8E:62:66:04:FA:9B:C1:D5","sha256":"A6:50:F9:AA:8F:DE:BF:66:5D:07:D8:E1:7A:C1:A8:F2:8B:70:55:A3:05:25:4B:3B:3C:C4:FB:C5:BA:9A:DC:B7"}}},"request":{"raw":"GET /skin/css/owl.carousel.min.css HTTP/1.1\r\nHost: www.gjpxjd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gjpxjd.com/\r\nCookie: server_name_session=81166b1d5cf64a1ee991362d3ab96dcd; PHPSESSID=3br6oi5uldoc43dolulnmjtib2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 19:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2023 07:49:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654de0a0-b78\"\r\nexpires: Wed, 31 Dec 2025 07:03:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846)","md5":"de0dfbabe627afa1b718d848b6b58e97","sha1":"73d8a692734089983b00005d99ef8e5e5b0dadeb","sha256":"016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d","sha512":"1aa3ffa639729b094f6fa55deca993e586daa6fa30a6d791abd7dfbee7e25d8669d18a4c4ed47db48ebfbf75378458b537d310997ba6ff205f10bc6863e4b533","ssdeep":"","tlshash":"7251bde4354b215f480fc32219d85e87293ecd52d8260a5a92bbd718479ae2d113ffcf","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-04T04:07:47.503141Z","times_seen":9223,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"www.gjpxjd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}